$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/A33A3E10755611ED9BD81B73C4F9AE02.roa File: A33A3E10755611ED9BD81B73C4F9AE02.roa (raw, json) Hash identifier: 7IOJI4hAFKwjxkzmC8riezJXoYygnlaloMbPjQm5zHE= Subject key identifier: DC:5D:E6:BC:2C:42:2D:42:B6:07:8F:7A:B8:11:21:B2:70:EE:09:AB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 05B2 Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/A33A3E10755611ED9BD81B73C4F9AE02.roa Signing time: Sat 27 Apr 2024 00:13:32 +0000 ROA not before: Sat 27 Apr 2024 00:13:32 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 141745 IP address blocks: 103.163.116.0/23 maxlen: 23 103.163.116.0/24 maxlen: 24 103.163.117.0/24 maxlen: 24 2001:df6:1580::/48 maxlen: 52 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: Apr 27 00:13:32 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=662c432c-8031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:94:80:34:54:0c:1f:db:9f:50:e3:d6:55: e6:91:d4:01:20:3d:e9:d7:1e:01:30:fc:84:04:07: f9:27:d4:83:9e:57:ba:26:99:a7:95:e1:3e:2a:e3: 9d:9a:cd:eb:f6:83:07:89:9e:81:68:dc:fc:b8:2f: 7c:14:3d:c5:11:1a:b5:60:b1:e6:5c:9d:48:79:f6: 06:a1:c3:b7:9b:87:c4:de:79:21:3a:ea:3c:12:ed: 7d:1a:3f:f5:f5:7b:df:2f:56:e0:b4:7f:8e:6c:ef: 14:84:b9:57:82:bb:bd:ab:64:92:77:34:65:85:36: 31:2e:6f:0a:a5:8e:29:5e:39:f7:5a:df:8b:dc:04: f2:72:37:ce:25:14:ab:50:a6:87:96:64:ed:f4:d8: 84:b2:31:59:ac:7b:88:d4:52:10:d6:36:b0:ce:36: de:fa:73:7f:9f:82:cf:a5:73:f6:8e:61:54:c8:b9: 0c:db:03:5f:a1:05:02:51:96:fa:a8:6e:c4:01:4c: c7:cd:26:da:8c:aa:79:41:97:7c:df:15:8b:8c:6e: ba:6a:77:b6:e6:7c:d3:f6:62:13:a5:22:31:89:a9: 81:a4:1a:23:1f:17:dd:50:1d:03:34:57:8d:82:2a: 15:f4:c7:ef:1a:6c:d7:70:a8:9a:40:94:9f:cd:93: df:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5D:E6:BC:2C:42:2D:42:B6:07:8F:7A:B8:11:21:B2:70:EE:09:AB X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/A33A3E10755611ED9BD81B73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.116.0/23 IPv6: 2001:df6:1580::/48 Signature Algorithm: sha256WithRSAEncryption 6d:66:36:d2:14:8e:6f:22:96:a2:4f:cd:8b:19:ad:2a:14:e6: 57:d2:d5:ad:23:0c:56:66:51:d2:d4:89:5a:89:fb:65:fd:dc: 85:8a:33:c4:0c:37:49:93:f8:7a:a2:c1:9e:5f:03:d9:40:fc: f8:12:32:b1:45:71:11:4f:22:3f:81:be:df:36:85:37:7d:fd: 5e:90:51:a8:3c:ba:52:56:29:74:8b:d7:e1:03:0b:fe:4b:9e: 35:f8:45:4b:47:3a:31:fc:51:87:84:b7:5b:41:2c:bc:92:ff: d0:9c:77:0d:54:99:4f:db:63:5b:04:7f:5e:a6:4e:c3:8e:94: 87:9c:38:bc:d8:7a:4d:6f:45:9c:0c:94:18:d3:99:69:27:00: e1:d6:61:79:08:18:e2:c0:58:1f:5d:99:d2:46:89:56:dc:80: ab:ba:04:bd:17:67:c0:7e:70:5b:d7:84:a6:29:78:e2:c3:0c: 0a:f0:a5:ed:9b:cc:78:9a:ee:1d:b3:6e:c3:ad:a6:e2:65:8e: 97:b7:dc:69:07:5c:95:68:20:5f:1d:f7:31:33:45:03:fc:bc: 72:ac:f4:8c:8f:2b:6c:3b:1e:6a:48:29:76:4b:2f:6a:ac:59: fa:bd:69:40:b5:2f:fe:df:9f:d7:62:e5:f6:f3:dc:07:03:ec: f1:aa:75:47 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjQwNDI3MDAxMzMyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjNDMyYy04MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+GUgDRUDB/bn1Dj1lXmkdQBID3p1x4BMPyEBAf5J9SDnle6JpmnleE+KuOd ms3r9oMHiZ6BaNz8uC98FD3FERq1YLHmXJ1IefYGocO3m4fE3nkhOuo8Eu19Gj/1 9XvfL1bgtH+ObO8UhLlXgru9q2SSdzRlhTYxLm8KpY4pXjn3Wt+L3ATycjfOJRSr UKaHlmTt9NiEsjFZrHuI1FIQ1jawzjbe+nN/n4LPpXP2jmFUyLkM2wNfoQUCUZb6 qG7EAUzHzSbajKp5QZd83xWLjG66ane25nzT9mITpSIxiamBpBojHxfdUB0DNFeN gioV9MfvGmzXcKiaQJSfzZPfbQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNxd5rws Qi1CtgePergRIbJw7gmrMB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY2RDQvQkQ5ODc1MDI3QThFMTFFQkE5MENDRTIyQzRGOUFFMDIvQTMzQTNFMTA3 NTU2MTFFRDlCRDgxQjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFno3QwDwQCAAIwCQMHACABDfYVgDANBgkqhkiG9w0BAQsF AAOCAQEAbWY20hSObyKWok/NixmtKhTmV9LVrSMMVmZR0tSJWon7Zf3chYozxAw3 SZP4eqLBnl8D2UD8+BIysUVxEU8iP4G+3zaFN339XpBRqDy6UlYpdIvX4QML/kue NfhFS0c6MfxRh4S3W0EsvJL/0Jx3DVSZT9tjWwR/XqZOw46Uh5w4vNh6TW9FnAyU GNOZaScA4dZheQgY4sBYH12Z0kaJVtyAq7oEvRdnwH5wW9eEpil44sMMCvCl7ZvM eJruHbNuw62m4mWOl7fcaQdclWggXx33MTNFA/y8cqz0jI8rbDseakgpdksvaqxZ +r1pQLUv/t+f12Ll9vPcBwPs8ap1Rw== -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:21 2024 by rpki-client on console-ams.rpki-client.org